Privacy

Updated 26 October 2026. This page covers the Moreably app and its beta list.

What stays on your device

Your decks, cards, study history and settings live on your device and are not sent to us. A backup is a file you make and keep yourself.

The beta list

• We keep your email address, whether you confirmed it, when, and which form you used.
• Your IP address is not stored. To stop one source from flooding the form we keep a scrambled form of it, together with the key that scrambled it. We delete both at the first sign-up after that day ends, so until then they stay in our database.
• We use the address for one email to confirm and one on the day the beta opens, then delete the whole list.
• Every email has a link that deletes your address at once.
• Joining the list does not create an account.

Your account

You need an account to have a memory aid written for a card, and to buy a plan. You sign in with a code we email to you; there is no password.

• Your email address and the date the account was made.
• Sign-in codes: we keep a scrambled form of each code, to check it. The code itself is not kept. We delete it at the first sign-in request or recall-count upload after a day has passed.
• Sign-ins: when a device signed in and last used the account. A sign-in ends 90 days after it was last used. On the web it is held in one cookie that Moreably needs to keep you signed in; on a phone it is held in the app. Moreably sets no other cookie, and no advertising or analytics tool of ours runs in the app.
• Your plan and your use: how many memory aids you have asked for in the current and previous month, which plan you have, and any packs you bought with what is left of them.

Memory aids

To write a memory aid, the app sends the front and the back of that one card to our server, which passes them to an AI model on Cloudflare to write one sentence. We count the request against your allowance. We do not store the text of the card or of the sentence. Our host sees the IP address of the request and uses it to limit how fast one device can ask; we do not write it to our records.

Payments

Paddle sells our plans and packs and is the seller of record. Paddle takes your name, address and payment details; we never receive or store them. On the web, opening the plans page loads Paddle's script from Paddle and asks Paddle for the prices, so Paddle sees that request, and Paddle may set its own cookies. Nothing of Paddle's loads on any other page. We store only the identifiers and dates Paddle sends back about your subscription or pack: its id, its price, its status and when the current period ends.

Recall counts

While you are signed in, the app sends two sets of counts: how your retired memory aids held up about a month later, and how words you add held up at their first review in the second week.

• What is sent: whole numbers only. For retired memory aids: for each of first retirements and later ones, for each strictness setting, how many were recalled, not recalled, not yet checked, withdrawn, or still open, and how many fell in each gap between reviews: under 7 days, 7 to 13, 14 to 20, 21 or more.
• What is sent about words you add: for words you add and study with a memory aid, how many were recalled, not recalled, not yet checked or withdrawn at their first review in the second week, how many were studied without a memory aid, and how many you never missed on the way, by the gap between reviews: 1 to 3 days, 4 to 6, 7 or more. Only words first studied between 16 November and 1 December 2026 are counted.
• What is not sent: no card text, no deck names, no card ids and no dates.
• Why: so we can tell whether the memory aids work.
• How long: each send replaces the one before it. We delete counts at the first sign-in request or recall-count upload after 13 months have passed since we received them. The app does not show them back to you.
• How to turn it off: in Settings, set Share recall counts to Off. Nothing more is sent. Counts already sent stay until you delete your account or the 13 months pass. The setting is on until you change it.
• Signed out, nothing is sent.

Get a copy of what we hold

In Settings, under Account, choose Export my account data. You get one file with every row we hold for you, except sign-in secrets: your email, sign-ins, use, purchases, subscriptions and recall counts.

Delete your account

In Settings, under Account, choose Delete my account. It cannot be undone.

• If you have a live subscription, we cancel it with Paddle first. If we cannot reach Paddle, nothing is deleted, so you are not billed for an account that is gone.
• Then, in one step, we delete your email, your sign-ins, your use, your purchases and subscriptions, your recall counts and any pending sign-in codes.
• Pack credit you have not used is lost with the account.
• The cards on your device stay. The app then offers to delete everything on the device too.

Copies that outlive a delete

• Our database keeps a short point-in-time history, up to 30 days, that only we can restore from. A deleted account is gone from it after that.
• Our email service keeps a log of messages it sent, for its own period.
• Paddle keeps its own records, as the law requires of a seller of record.
• Backup and export files you saved.